SUSE: Security Advisory (SUSE-SU-2021:1268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4548583476035584 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

[SECURITY] Fedora 34 Update: rust-1.51.0-3.fc34

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

lxc:fuzz-lxc-define-load: Segv on unknown address in lxc_conf_free

Detailed Report: https://oss-fuzz.com/testcase?key=4537907915390976 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-define-load Job Type: libfuzzerasanlxc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: lxcconffree lxccontainerfree lxccontainerput...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1268-1)

This update for xen fixes the following issues : CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 Fixed an issue where xenstored was crashing with segfault bsc1182155. Note that...

SUSE-SU-2021:1268-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 - Fixed an issue where xenstored was crashing with segfault bsc1182155...

SUSE-SU-2021:14702-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-3419: Fixed a stack overflow induced by infinite recursion issue bsc1182975. - CVE-2021-20257: Fixed an infinite loop in the e1000 NIC emulator bsc1182846 - xenstored crashing with segfault bsc1182155...

RHEL 8 : dpdk (RHSA-2021:1239)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1239 advisory. The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space...

SUSE: Security Advisory (SUSE-SU-2018:3926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2972-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mosquitto -- NULL pointer dereference

Roger Light reports: If an authenticated client connected with MQTT v5 sent a malformed CONNACK message to the broker a NULL pointer dereference occurred, most likely resulting in a segfault. Note: a CVE is referenced in the github commit but it appears to be for a python-bleach vulnerability so ...

wasm3:fuzzer: Segv on unknown address in Compile_BlockStatements

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4873136001646592 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

perfetto:trace_processor_fuzzer: Segv on unknown address in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

Detailed Report: https://oss-fuzz.com/testcase?key=6192247004594176 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: std::1::tree, std...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5088833726185472 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

tidb:fuzzMarshalJSON: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5929138021072896 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

orbit:ElfFileLoadSymbolsFuzzer: Segv on unknown address in llvm::object::Elf_Note_Iterator_Impl<llvm::object::ELFType<

Detailed Report: https://oss-fuzz.com/testcase?key=4874350312423424 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ALPINE-CVE-2021-28831

decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...

CVE-2021-28831

decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...

gpac:fuzz_parse: Segv on unknown address in gf_list_count

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5026573989314560 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gflistcount...